last executing test programs: 4.932681035s ago: executing program 0 (id=119): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000}}) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x0, [{&(0x7f0000ca1000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000b7b000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000e0e000/0x4000)=nil, 0x4000000000}, {&(0x7f0000ca2000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f93000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000c20000/0x4000)=nil, &(0x7f0000eb0000/0x14000)=nil}, {&(0x7f0000ec3000/0x4000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000eb0000/0x2000)=nil, &(0x7f0000a73000/0x3000)=nil, 0x2}, {&(0x7f0000ca4000/0x1000)=nil, &(0x7f0000b7c000/0x2000)=nil, 0x2}, {&(0x7f00008fb000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000a75000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x3}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x100000001}, {&(0x7f0000c64000/0x14000)=nil, &(0x7f00001d0000/0x2000)=nil, 0x9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil}, {&(0x7f0000913000/0x2000)=nil, &(0x7f0000c22000/0x2000)=nil}], './file0\x00'}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='.\x00', 0x200, 0x100) getdents(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xa}, 0x4, &(0x7f0000001a40), &(0x7f0000000100), 0x0, 0x0) 4.932407562s ago: executing program 0 (id=120): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="5aca", 0x2}], 0x1) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000480)="4daadca2a150ac", 0x7}], 0x1) write(r0, &(0x7f0000002600)="7cc9", 0x2) sendto(r0, 0x0, 0x0, 0x402, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 4.826660308s ago: executing program 0 (id=127): kqueue() (async) r0 = kqueue() lchown(0x0, 0x0, 0x0) kevent(r0, &(0x7f0000000000)=[{{}, 0xfffffffffffffffd, 0x0, 0x1, 0x7, 0xff}], 0x96, &(0x7f0000000300), 0xfffb4161, 0x0) syz_emit_ethernet(0x138, &(0x7f00000001c0)=ANY=[@ANYRES64=r0]) syz_emit_ethernet(0x2e, &(0x7f0000000300)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x2, 0x3) connect$unix(r1, &(0x7f0000000000), 0x10) (async) connect$unix(r1, &(0x7f0000000000), 0x10) setitimer(0x2, &(0x7f0000000140)={{0x8, 0x9}, {0xffffefff, 0xb}}, 0x0) socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) socket(0x1, 0x2, 0x0) (async) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(0xffffffffffffffff, 0x81206919, 0x0) mknod(0x0, 0x2000, 0x1e5f) (async) mknod(0x0, 0x2000, 0x1e5f) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = dup(r3) ioctl$BIOCSBLEN(r4, 0xc0044266, &(0x7f0000000100)=0x6) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000040)=""/17, 0x11}], 0x2) (async) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000040)=""/17, 0x11}], 0x2) poll(&(0x7f0000000240), 0x20000140, 0x9) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) setgid(0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)="fb", 0x1}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000400)="fb", 0x1}], 0x1) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000240)) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) bind$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x0}, 0x8) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f00000000c0)='./file0\x00') (async) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f00000000c0)='./file0\x00') 4.570306604s ago: executing program 0 (id=142): open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x11, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x2000000, 0x1000302010008, 0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60db"]) unveil(0x0, &(0x7f00000000c0)='x\x00') sysctl$net_inet6_ip6(&(0x7f0000000100)={0x4, 0x18, 0x29, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000001c0)="f623bd65", 0x4) 4.263373327s ago: executing program 0 (id=152): r0 = socket(0x24, 0x2, 0x0) (async) syz_emit_ethernet(0xb6, &(0x7f0000000140)=ANY=[@ANYBLOB="8b4f69c83b01ff0cf7ffffff86dd61b91d3a00802c03050000000000000000000000000000bb4079e811670a1ec2952a422d926cce0733820005ffffff833a"]) (async) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$PCIOCWRITE(r1, 0xc00c7007, &(0x7f00000005c0)={{}, 0x2, 0xfffffffe, 0x2}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) (async) r2 = syz_open_pts() close(r2) (async) syz_open_pts() (async) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x8) (async) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda974a82388ef359025250129bdb3b8c172b8359eb32d47209b2a02c3b86a29b75b43b0b03", 0x2d}], 0x1) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x4, 0x10000002, 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x9) syz_extract_tcp_res(&(0x7f0000000080), 0x3, 0x1) 4.177681774s ago: executing program 0 (id=157): r0 = socket(0x2, 0x4001, 0x0) (async) r1 = socket(0x2, 0x3, 0x2f) r2 = dup(r1) ioctl$WSDISPLAYIO_GETEMULTYPE(r2, 0xc014575e, &(0x7f0000000080)={0x81, './file1\x00'}) (async) r3 = syz_open_pts() writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x6}, 0x4, &(0x7f0000000040)="06950100000000000000720d294b00", &(0x7f00000000c0)=0xfffffffffffffeb8, 0x0, 0x12) (async) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001700)={0x0, 0x40000000}, 0x10, 0x80, &(0x7f0000001780)={0x0, 0x7}) (async) r4 = kqueue() kevent(r4, 0x0, 0xfffffff7, 0x0, 0x800, 0x0) close(r4) (async) r5 = dup(r0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) close(r6) (async) r7 = dup2(r5, r6) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) (async) ioctl$TIOCSETD(r7, 0x8004741b, &(0x7f0000000000)=0xff) (async) select(0x40, &(0x7f0000000100)={0x3, 0x2}, &(0x7f00000024c0)={0x4, 0x0, 0x0, 0x4, 0x0, 0x2, 0x1}, 0x0, 0x0) mkdirat(r6, &(0x7f0000000040)='./file0\x00', 0x0) 3.064639153s ago: executing program 1 (id=161): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt(r2, 0x0, 0x6, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000240)=0xffffffff) writev(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000000080)="57a62b", 0x3}], 0x1) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$WSKBDIO_SETMAP(r3, 0x8010570e, &(0x7f0000000080)={0x0, 0x0}) 2.841504907s ago: executing program 1 (id=173): sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, &(0x7f0000000140)="0c5b73f6a88b35a936be1d7d28dde071426d70a16e66069a3019f7c92426e37b8975fa62a750fdacd7fe5d6bb43431dbfa27ccecf7b9b588b4858247d5a8dca85988718ded5d276e71501edb04bbe0b2dfaa776fd446b083800f5c50dce81071b93a40fb7b053a7b3960fcf6afeee1844a77de3514bb72f001a00ab9bd101f1fbf678c5cbe80567927fe6314db276193fe0abd436d5dc785867dada1df2d3ea041f1b8bea954d614f75d4d0e361c247b8469b5974bcf38f3f6e992303f0404fa338871ff7311c63f879f6a65301b5ede", &(0x7f0000000040)=0xd0, &(0x7f0000000240)="c7682aded82702c5f63eaeb2a0c4b5cf21cb4d15b9bc018af3644f4d186412fa96e9637443d5e8ffdaf065de342baf58294da1c0e791aec73134e1d10cdd63eb7afe777391dcdb42c96b251ed26d36135f379989503cad23d77a4d0eb1ad6b53d97887f8fba70ed259e002889b87814eca0d7a2413114f293a713d414ae7d4e3a533fc71f89f", 0x86) (async, rerun: 32) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000080)=0x5) (async, rerun: 64) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/193, 0xfffffdf0}], 0x1) (rerun: 64) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x50, 0x0, 0x37) 2.836495082s ago: executing program 3 (id=175): syz_emit_ethernet(0xcc, &(0x7f0000000140)={@broadcast, @empty, [], {@ipv4={0x800, {{0x19, 0x4, 0x2, 0x1, 0xbe, 0x64, 0x200, 0x9, 0x2c, 0x0, @multicast1, @broadcast, {[@end, @rr={0x7, 0x3, 0x3}, @lsrr={0x83, 0x13, 0xb3, [@remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @multicast1]}, @lsrr={0x83, 0x1f, 0x3, [@multicast2, @remote={0xac, 0x14, 0x0}, @rand_addr=0x80000001, @multicast2, @broadcast, @rand_addr=0xdb18, @local={0xac, 0x14, 0x0}]}, @ssrr={0x89, 0x17, 0x6, [@multicast1, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @empty, @loopback]}]}}, @icmp=@parameter_prob={0xc, 0x2, 0x0, 0x8, 0x6, 0x0, {0x13, 0x4, 0x3, 0x2, 0xfffb, 0x68, 0x2, 0x4, 0x1d, 0x3, @remote={0xac, 0x14, 0x0}, @multicast1, {[@generic={0x44, 0x4, 'tM'}, @end, @rr={0x7, 0x17, 0x2, [@empty, @broadcast, @remote={0xac, 0x14, 0x0}, @loopback, @remote={0xac, 0x14, 0x0}]}, @generic={0x0, 0x10, "5472c25720b8d814eb4718d17a5b"}, @noop, @lsrr={0x83, 0xb, 0x4, [@multicast1, @broadcast]}]}}, "57e625c4a27a"}}}}}) r0 = socket(0x11, 0x3, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/22, 0x16, 0x820, 0x0, 0x0) execve(0x0, 0x0, 0x0) 2.778008304s ago: executing program 3 (id=180): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd00) r0 = open(&(0x7f0000000140)='./bus\x00', 0x10, 0x3ea) recvfrom(r0, &(0x7f0000000000)=""/138, 0x8a, 0x1041, &(0x7f0000000100)=@in6={0x18, 0x3, 0x6, 0x7f}, 0xc) r1 = kqueue() kevent(r1, &(0x7f0000000200)=[{{r0}, 0xfffffffffffffffe, 0x29, 0x80, 0x2, 0xc}, {{r0}, 0xfffffffffffffffe, 0x10a, 0x10, 0x4, 0x8000000000000000}], 0x8, 0x0, 0x15, 0x0) 2.776213992s ago: executing program 7 (id=181): writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x22, 0x7, 0x10) connect$unix(r0, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @random="d0b5049f6b63", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xb, @random="b90dda7e26df", @multicast2, @random="d1b8e775ad23", @multicast1}}}}) 2.693021368s ago: executing program 2 (id=182): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x18, 0x1, 0x0) shutdown(r0, 0x1) r1 = socket(0x800000018, 0x2, 0xfd) (async) r2 = socket(0x2, 0x1, 0x0) r3 = dup(r2) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r3, 0x0, 0x15, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) getsockname$unix(r1, 0x0, &(0x7f00000010c0)) (async) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sysctl$kern(&(0x7f0000000000)={0x1, 0x36}, 0x2, &(0x7f0000000080)="4ab95a257a02557de36d68bee9064c3fbdee712655ab0171f6016d64f0046e30371564b30ee464e601968cca4c026ff8ddfcce332b5b970ba908e5e005237e655172297bc1ea59f24d149d013bf3915fd96ddd4f39978ae3a758f9245ba4e6fc66c5d96095ef1a851a864e07344e27f5266a691af32a9ff777654d71c3c4879ef66ffe4205669f7ce403b00d27f501d6251eb16659627c6043bc4ef36fbcf9371909f21a21413055f9e128098afd0974c063d50ebcf8e29da4b427e4b77c6942118af930c529bf614ce8e6a25957425f890095652cfd5bec80200c32efcb65bd06c0733c3675cd50f8dc0c2a5556b82c056c", &(0x7f0000000180)=0xf2, &(0x7f00000001c0)="beb9664bbce4dae4bc3481ba899fd2b2d38efd9000617a846dedc594ef7d9011bc746dec7af4ed5a2951839c6d218427dbcb0a15484a9407257745b4d35099d1bf3bde32bcd710d1d20fd95b485889dd310c08b18339c014f99678138b5b03b5acd91781c63a8611d59d45229c79730a6af381b787aa584be53b224136a0164d6a3fa03a4d5de3da3da623d6508d35ba7c59fde70c220d2af3b90ac545b96123506b5708f741648e23988675bd41c44078cf43df3f10704c0e08d012821757b1eec055cdc0425f923837f7ff86aa10d839ba5c8da957df7c86a770959e55215ef37c", 0xe2) 2.692742799s ago: executing program 7 (id=183): clock_getres(0x2, &(0x7f00000000c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) r2 = msgget$private(0x0, 0x0) msgrcv(r2, &(0x7f0000000280)={0x0, ""/94}, 0x66, 0x2, 0x1000) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f00000003c0)='.', 0x1}], 0x2) msgsnd(r2, 0x0, 0x401, 0x0) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000180)={0x0}) syz_emit_ethernet(0x4ce, &(0x7f00000002c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x4c0, 0xfffd, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x4, 0x0, 0x3, {[@generic={0x0, 0x11, "44ac2b5b41c99bd503c2d0f2587844"}]}}, {"1fdd5e5e27a71245515c1d42ae14bf0fa48cf52efae5ff7c674d7265ba88444a21fcf2e1ab75b9696b04489c2807683cc35616c663af4407c3c967a7539ec8c726328ab631e9dc5a3440709886b75aa9f1ec4891398123312a07641c023a55ff01338e523ff42c57c5a3949590a9154fc64df08e5be0e6a538d4b49bec54db2d50c494f59aedc67ca15311572cdff2ba0e9116143a20188369e0971bedc12fb994dc11aaf45f0f0f730d9bb057d4cbf2e86c473ffed69b4e4b21fc27e26c7bf1d7c1f0fa6f0947b86f0517c3db60517179433aa8760ccdccfb45f1bf0b094c0b9bb22ad46975a23592f79969b3ea46759eb4c1a84016258f6f489f1ecbf3efbcd79292515f0e06640a5fb8769541f3d898790488b949342bda309eceeeb7dd1d33dd82b450ad71105d38d050080290734449765fcfe4bda05d145c1fc6e6b4ead51afe9d9c3504040d46c0d36b429eb8136673ab6b6d5399211ae4275dbddc7617d39f96ee8444163cfb06f73605f9a702e501cff3d55f6a4143f8c50dc66b7252621e4063be497596b418d5bc878b22355a33f725c61e5363e93335195d7af37adb48b9ee457eb1b0f652e612f3e8f9e46f631104d2a187742e2444b2503d0a4023e862883d9271cd6bafea092544c79d5317d155ddd2d9549e3b4985f18a8c949dee2c901d2af99373d5937e3660dc41fe1ed3b9f3fe37660ea413de3bfdb2c4296fb316a55257997855bca8ad151af75db6dbd045cc08fd959f30d01f2777c135ed18163cc82b8aa0eba6d5b52e401b7b04ea866a50ba03167513d5967a3260c0c648c275f4c52379f1200aea2a6015305cc7387138c6d5ff9e3918709fbd9672c49b537eb2a5f53f5c923c1ccc80020c02997bed00ac64ae60c1807a501ba4f4c6ac45ad3eca6e8adf20cc75032ec8682982efa8c50c3ffd5b6b73854eb155bf1164e001215394d382b9ed73076ce0c36c823b1177a9b91412552167f2ea2c73c2a306302a662b09c3b5edc7a0035731b244426fe3ca4581069c3ee552958b3249b1be1c5a742d65f6672877ab991dabb1294da9a193da2a8fc255adeff4b952a91233c902724402befce8aa2ee51e0b696d8ab2f49e7995a03729239eeddbe75725e517fe3b0e14597a912291a1bafbde6424e408c3717b60f7af22c0c9f245506d5f29a0e3b19c8029fd1b0b19e62268065ee705640dc397bc14faa602f3a881bbd63ed543258d75337b0b4838379afa7de487aa8dd6940d4b4a1a3a005d85c15347edfe5ee535ff69c310ee94651a539690024e9bdfcaaaa6078160d848c706c5b7f4add25300d1c6ae123d6218c86b7dd2349b426e79fbdf76c9e91e3f7f5a5b068028b3a4bf0b485b1b0ff5d02e43b679659a6baa23cfd07c583af266767115038ce4797f5e57c323c90887f0be2a6e78dd6fbd5d609b0fc5a36a26746665a06ecc5a518a2c11a1b53ea7d4641d63ade5d45177a06946704c25b56f08076df2ab1c23c1092880aa5c6dea3c40f2b9ad03b7f052da495dde6b1baf263ea9286e814ede9b37460fde2e10ff01c8111909615e6007f156af5f64faced04255d67facb13f9edd6280406a29149d60a9845101a247d2d9c5be4653a3830a6d24b311"}}}}}}) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x410}, 0x8) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r4, 0xc0504417, &(0x7f0000000740)={0x13, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = semget(0x0, 0x1, 0x1f8) semctl$GETNCNT(r5, 0x1, 0x3, 0x0) msgrcv(r2, 0x0, 0x0, 0x1, 0x1000) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) ioctl$FIONREAD(r1, 0xc0206925, &(0x7f00000001c0)) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='#', 0x1}], 0x1) 2.688525447s ago: executing program 2 (id=184): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0xbd) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r1, 0xc0084461, &(0x7f0000000740)={0x8, 0x5, 0x2, 0x1ff, "a3ae02c1000000000002000ffb7dd5a80b546600", 0x9, 0x42}) ioctl$VMM_IOC_INTR(r0, 0x800c5606, &(0x7f0000000140)={0x1, 0x9, 0xe05}) sysctl$kern(&(0x7f0000000000)={0x1, 0x36}, 0x2, 0x0, 0x0, &(0x7f0000000180), 0x0) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f0000000180)={0x1, 0x5eb, {[0x0, 0x8000000000000000, 0x1, 0x7ff, 0x8000000000000001, 0x2, 0x100000001, 0x3, 0xd, 0x9, 0x1, 0x1, 0x6, 0x4be, 0x1, 0x0, 0x8, 0x101], [0x0, 0xd, 0x6, 0x100000000, 0x0, 0x1, 0x4, 0x6, 0xffffffffffffffff, 0x3], [0x6, 0xff, 0x378, 0x4, 0x27, 0xfff], [0x1, 0x1, 0x6, 0x3, 0xb, 0x10001], [{0x8, 0xfffff967, 0x6, 0x6}, {0x7, 0x1, 0x9, 0xfff}, {0x5, 0x1ff, 0x9e3f, 0x3}, {0xeffe, 0x0, 0x9, 0x53eb}, {0x7901, 0x1, 0xe4, 0xb}, {0x7ff, 0x9, 0x6, 0x7f}, {0x5, 0xd9d, 0xdf, 0xb0}, {0x3, 0x4, 0x800, 0x2}], {0x6, 0x6, 0x3ff, 0x4}, {0x0, 0x8, 0x8f, 0x80000001}}}) 2.687183429s ago: executing program 2 (id=186): r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x4, 0x1) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000080)="0ba36481598e52e69358f8ce7adc6cd68168aafe138711ebdd88ef6b10f7f358212efda294a3f99cd085b9ce7ea2a7b555d3e2bd53954dbc43ba7640e4b25de3ded6d48530a23b236d8340fef8f64ee12501427fa163b8d2da7ba342da20b3a4d6b05d354c3425debceb0a3dd700a5de2f2524f2bbb293f7fbea7bd23f76cf87c82c813a0c766517617043934ae71fa47d7a0e798b175a9043227316590fdbeb92b87e224ead0fafa289cc44748691428cc0b01bebeb4ef82c1c9d715eb6fd3f8bd8e32e040eec7ac42362d4450fef940a4aaef79896a149ed9092d3027947a5d0a9db717ac28731cbc2a26ef008e51ccd", 0xf1) ioctl$BIOCSDIRFILT(0xffffffffffffff9c, 0x8004427d, &(0x7f0000000180)=0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x1}, 0x8) ioctl$FIOGETOWN(r2, 0x4004667b, &(0x7f0000000240)) readv(r3, &(0x7f0000001500)=[{&(0x7f0000000280)=""/143, 0x8f}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000400)=""/64, 0x40}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/168, 0xa8}], 0x5) syz_emit_ethernet(0x159, &(0x7f0000001580)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x8, 0x6, "4ccf6b", 0x123, 0xa0, 0x6d, @rand_addr="e2ed17633dfe46821a0b36904fd1c6b5", @mcast2, {[@routing={0x67, 0x2, 0x0, 0x81, 0x0, [@rand_addr="c7c878cd2e460c5f70f321d08caee85c"]}, @fragment={0x50, 0x0, 0x40, 0x1, 0x0, 0x2, 0x66}, @fragment={0x2b, 0x0, 0x7, 0x1, 0x0, 0x5, 0x66}, @dstopts={0x70, 0x2, '\x00', [@ra={0x5, 0x2, 0x8000}, @ra={0x5, 0x2, 0x843}, @ra={0x5, 0x2, 0xd}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}, @hopopts={0x3c, 0xd, '\x00', [@generic={0x1, 0x62, "afd910e96cf237cf5e5b18d70e15fb84fe6ddb54f8029549b621b01d663a8409f52c448ae14b32b8cc1d00765f911697193ca3177dfa1dd43a47d926b22414199b4d2433e67ebe1da17e33cb8708bc3df027335d160d1a0b016901fecd5fe8caf7e0"}, @ra={0x5, 0x2, 0x7}]}, @fragment={0x6c, 0x0, 0x9, 0x1, 0x0, 0x12, 0x64}, @fragment={0x2e, 0x0, 0x7, 0x1, 0x0, 0x7, 0x66}, @routing={0x2b, 0x4, 0x0, 0xff, 0x0, [@loopback, @local={0xfe, 0x80, '\x00', 0x0}]}], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x4, 0x7, "2db6858bc46fad36e3ec4d30affb9d49c1b1c19324f76195c707c5893f81f4380411bcd0ba67eb052d67ad"}}}}}}) r4 = dup2(r1, r2) kevent(0xffffffffffffffff, &(0x7f0000001700)=[{{r3}, 0xfffffffffffffffb, 0x6, 0x20, 0x8000000000000000}, {{r0}, 0x0, 0x4, 0x80, 0x80, 0x7e7}], 0xfffffffd, &(0x7f0000001740)=[{{r3}, 0xfffffffffffffffd, 0x3, 0x1, 0x8}, {{}, 0xfffffffffffffffc, 0x3, 0x40000000, 0xd, 0x3452}, {{r3}, 0xfffffffffffffffe, 0xa2, 0x0, 0x48c6, 0x5}, {{r4}, 0x7, 0x76, 0x8, 0x6, 0x9}], 0x7, &(0x7f00000017c0)={0x9, 0xfff}) ioctl$WSKBDIO_SETBELL(r4, 0x80105703, &(0x7f0000001800)={0xfffffeae, 0x3, 0x8, 0x5}) ioctl$TIOCGWINSZ(r4, 0x40087468, &(0x7f0000001840)) preadv(r4, &(0x7f0000001980)=[{&(0x7f0000001880)=""/151, 0x97}, {&(0x7f0000001940)=""/21, 0x15}], 0x2, 0x80000001) lseek(r0, 0x8, 0x1) ioctl$WSKBDIO_COMPLEXBELL(r4, 0x80105702, &(0x7f00000019c0)={0x7, 0x9, 0x7fff}) ioctl$TIOCSETVERAUTH(r4, 0x8004741c, &(0x7f0000001a00)=0x9) sendto$unix(r4, &(0x7f0000001a40)="931e87cb1e80db573e4826ffbf749e67c4ccd282f294b52c543945e76f0f21b33f5d0e970de704f1e3c232a2e4600a245992c9e0b7f04fe5c1cd5c75df15e976b21af7f26a3adbc980a733289aa7e056c59932dcdfad6f9975640476d916352477375231784c", 0x66, 0x0, &(0x7f0000001ac0)=@abs={0x0, 0x0, 0x2}, 0x8) ioctl$WSKBDIO_GETBELL(r4, 0x40105704, &(0x7f0000001b00)) getpeername$unix(r4, &(0x7f0000001b40)=@abs, &(0x7f0000001b80)=0x8) r5 = socket$unix(0x1, 0x7, 0x0) bind$inet(r1, &(0x7f0000001bc0)={0x2, 0x3}, 0xc) setsockopt(r5, 0xa, 0x9, &(0x7f0000001c00)="bd1e556f3f7583551b8fc0e0dc2e4ae9e3b8b0a77a358b24edbda7630aa284ccb0d6d048bae7b7c17f4aaeba49792087d0c5f40a5ce7111b00b48e7946ba7da85d04946a7d700b4863d13807b3ba647580e5402caa8e7186f2", 0x59) ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000001c80)={0x8, 0x8000, 0x7, 0x9, "75faec117ed599e63163566623df2526b50df0f8", 0x5, 0x401}) close(r0) getgroups(0x4, &(0x7f0000001cc0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) r7 = getegid() r8 = getgid() setgroups(0x7, &(0x7f0000001dc0)=[0x0, r6, r7, r8, 0x0, 0x0, 0x0]) 2.604392931s ago: executing program 3 (id=187): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5449) (async) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) (async) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r1) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r2, 0x0) (async) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x2, 0x2, 0x0) close(r3) (async) r4 = socket(0x2, 0x2, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) (async) connect$unix(r3, &(0x7f0000000000), 0x10) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000040)={0x0, 0x0}) rmdir(&(0x7f0000000080)='./file0\x00') (async) open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) 2.602384665s ago: executing program 5 (id=191): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b40)="82ffff47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x417}, 0x404) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0xffff, 0x2, &(0x7f0000000b40)=""/167, &(0x7f0000000c00)=0xa7) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) kqueue() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) kevent(r2, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) ioctl$FIONREAD(r1, 0x8060694a, &(0x7f00000001c0)) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x17) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040)={0x0, 0xff}, 0x10, 0x42, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r6 = accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) poll(&(0x7f00000000c0)=[{r6, 0x100}], 0x1, 0x1) ioctl$TIOCSETA(r5, 0xc4504448, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, "6374224ff1c14649ebb1789280c9795a6b47c1d1"}) 2.539285892s ago: executing program 6 (id=192): setitimer(0x0, &(0x7f0000000080)={{0x2000200000000, 0x4}, {0xfffffffffffffffd, 0x6}}, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) ioctl$VNDIOCCLR(r1, 0xc0a86b04, &(0x7f0000000200)={0x0, 0x10000, 0x0}) r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PCIOCREAD(r2, 0xc0107002, &(0x7f0000000080)) ioctl$PCIOCWRITE(r2, 0xc0107003, &(0x7f0000000000)={{0x9, 0x2, 0x1}, 0x8000, 0x6, 0x7}) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES32=0x41424344, @ANYRES16]) 2.538615871s ago: executing program 3 (id=193): r0 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) fcntl$lock(r0, 0x7, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="d6c332d057a3b0af00d7194f360a4244941b78972ca6b610a9456d13369fc1e6550147d32dc59e71b71bcfbe9ac68a328a734927682851d761aafeef", @ANYRES16=r0]) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) (async) fcntl$lock(r0, 0x7, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="d6c332d057a3b0af00d7194f360a4244941b78972ca6b610a9456d13369fc1e6550147d32dc59e71b71bcfbe9ac68a328a734927682851d761aafeef", @ANYRES16=r0]) (async) 2.531925651s ago: executing program 5 (id=195): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f00006ad000/0x1000)=nil}, {&(0x7f0000001000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x10}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f00001d0000/0x2000)=nil, &(0x7f00001d2000/0x1000)=nil}, {&(0x7f00006ad000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1ff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00001cf000/0x1000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00001d3000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00006ae000/0x2000)=nil}], './file0\x00'}) write(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040)={0x0, 0xff}, 0x10, 0x42, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) 2.469133984s ago: executing program 4 (id=196): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x199, 0x7}, 0x85c, 0x4, 0x0, 0x0, 0x80000000003, 0x4000000000007b, 0x5, 0x8000004}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x4, 0x9) setsockopt(r1, 0x0, 0x20, &(0x7f0000000080)="01000000", 0x4) dup2(r1, r0) bind(r0, &(0x7f0000000000), 0x10) r2 = socket(0x2, 0x2, 0x0) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$WSKBDIO_GETMAP(r3, 0xc010570d, &(0x7f0000000180)={0x8, &(0x7f0000000100)=[{0x4, 0x9, 0x52, 0x0, 0x4}, {0x5, 0x8, 0xaf3, 0x6, 0xfff}, {0xfffe, 0x9, 0x9, 0xe3, 0x2}, {0x22, 0x6, 0x6, 0x3, 0x5}, {0xfffe, 0x8, 0xf001, 0x7, 0x1}, {0x2, 0x9, 0x2, 0x53b1, 0x9}, {0x8001, 0xd, 0x3, 0x4, 0x5}, {0x2, 0xfff5, 0xff, 0xc, 0xbf4}]}) setsockopt$sock_int(r2, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r2, &(0x7f0000000000), 0x10) write(r2, 0x0, 0x0) 2.454517205s ago: executing program 7 (id=197): syz_emit_ethernet(0x6a, &(0x7f0000000380)={@broadcast, @remote, [{[], {0x8100, 0x0, 0x0, 0x4}}], {@ipv6={0x86dd, {0x8, 0x6, "800580", 0x30, 0x3b, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr="fe4d1aafbaf5c2c66da2acf4faeb1e58", {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x38, '\x00', {0x0, 0x6, 'j@\r', 0x6, 0x32, 0x4, @rand_addr="202de03bf203cc442ae33206a327509f", @rand_addr="cc3ccd44957fb2011da86b445babbb82"}}}}}}}) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0xa7210e10bc3c9de9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = socket(0x18, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x2, r2) close(r3) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r6 = socket(0x18, 0x3, 0x3a) setsockopt(r6, 0x29, 0x6c, &(0x7f0000000040), 0x4) close(r6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) chroot(&(0x7f0000000080)='./file0\x00') recvmsg(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) r7 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000000)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d357e382526b1573271ae", 0x20}], 0x1) ioctl$FIONBIO(r7, 0x82907003, &(0x7f0000000140)=0x1) 2.454375438s ago: executing program 4 (id=198): chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close(0xffffffffffffff9c) 2.451433965s ago: executing program 5 (id=199): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETA(r0, 0xc008441e, &(0x7f0000000200)={0x2003, 0xfff, 0x4009, 0x0, "97a2e900", 0x4, 0xbff}) pwrite(r0, &(0x7f0000000100)="a7ca83c753aae2f0d8ae5a18126cf540db6ced836afb41a5aa80010d20972833c501e4133fadd92655b06ca1c435cde671b0a5b1017fbfe4ecc7c4a5cc4605efee7f96fc05af3965ed35265fd8b1eae9f2357b99beb3a41ab5f91c3e0584e7ba84cb3078b8d1a45990518c7694171089f82f58a2b29329aa955f3a7df1de77d56bf10df192f02d09a07bf2f4c731a699e35d45aa6a1fd163c4ac7bdf3784a2eee143e81933dd29f8f1217b4e6753c40c982434c2", 0xb4, 0x10000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170, 0x9}, 0x7, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = getppid() fcntl$lock(r1, 0x8, &(0x7f0000000000)={0x0, 0x1, 0x7126, 0xb1, r3}) socket(0x18, 0x3, 0x3a) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0, 0xffffffffffffff20, 0x0, 0x0, 0x403}, 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETA(r0, 0xc008441e, &(0x7f0000000200)={0x2003, 0xfff, 0x4009, 0x0, "97a2e900", 0x4, 0xbff}) (async) pwrite(r0, &(0x7f0000000100)="a7ca83c753aae2f0d8ae5a18126cf540db6ced836afb41a5aa80010d20972833c501e4133fadd92655b06ca1c435cde671b0a5b1017fbfe4ecc7c4a5cc4605efee7f96fc05af3965ed35265fd8b1eae9f2357b99beb3a41ab5f91c3e0584e7ba84cb3078b8d1a45990518c7694171089f82f58a2b29329aa955f3a7df1de77d56bf10df192f02d09a07bf2f4c731a699e35d45aa6a1fd163c4ac7bdf3784a2eee143e81933dd29f8f1217b4e6753c40c982434c2", 0xb4, 0x10000) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170, 0x9}, 0x7, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0x1}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x18, 0x5, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x18, 0x1, 0x0) (async) close(r2) (async) getppid() (async) fcntl$lock(r1, 0x8, &(0x7f0000000000)={0x0, 0x1, 0x7126, 0xb1, r3}) (async) socket(0x18, 0x3, 0x3a) (async) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0, 0xffffffffffffff20, 0x0, 0x0, 0x403}, 0x1) (async) 2.451119998s ago: executing program 4 (id=200): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x9c, 0x4000}, 0x100000000006, 0x861, 0x0, 0x0, 0x1, 0xffffffff, 0x6, 0xfffffffffffffffd}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) (async, rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x18, 0x1, 0x0) close(r0) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async, rerun: 32) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) setrlimit(0x8, &(0x7f0000000400)={0x7, 0x54}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x7ffe}) (async, rerun: 32) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = socket(0x18, 0x1, 0x0) close(r2) (async) r3 = socket(0x18, 0x3, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async, rerun: 64) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (rerun: 64) getpeername$unix(r2, 0x0, &(0x7f0000000100)) (async, rerun: 32) r4 = syz_open_pts() (rerun: 32) close(r4) (async, rerun: 32) r5 = syz_open_pts() (rerun: 32) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000500)=0x7) (async, rerun: 64) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x8, 0x108) (rerun: 64) chflagsat(r6, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) (async) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000040)="6116e89917c9f52e88d1e215fcc96d3ad2c6636cc5d8d16b98ce4e717830946ebe4c242b9c240d", 0x27}, {0x0}, {&(0x7f0000000240)="7ab12a4dffa97bf4385fe86ddf7beb3e61effaa6454f7f7eaabd74b6cb2026d368e0adc93fb619901d5c044ca05a785e79e107cb078a18a41ca808f0c5b5566fd7a1556a75a9ee5de99b58e3b9644ea024efbc56a58f78651ed82760e396c217bdef35d2fed44d4037484787344d33a93690b01dfb6c8ee8db1d71a01c644959b7380a6146d2daa69f3c366e5de9293554028f3d4338e67fb653644a14c94557", 0xa0}, {&(0x7f0000000300)="2cdf3c11956cfcc520859c7b68", 0xd}, {&(0x7f0000000340)="06eba9b376d69061ce2ddbf8eed3f70463d2aa983465fae9f4ef4a8f89002c9e5f689c2492362693e07e90e6118fb39d7a34d138c80c150f3fd44bed2479228982a0e91cb851397cb09ea99a0f5010328a83851f16186f9d753d0411c1cf7f", 0x5f}], 0x5) 2.447503825s ago: executing program 6 (id=201): sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x2, 0x0, 0x0, 0xd}, 0x6) r2 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) setitimer(0x2, &(0x7f0000000100)={{0xfff, 0x1}, {0x3, 0x3}}, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f0000000140)="71f91e3871ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff17, 0x0, 0x36) ioctl$WSDISPLAYIO_LDFONT(r1, 0x8058574d, &(0x7f00000001c0)={'./file0\x00', 0x2, 0x8, 0x75f3, 0x1, 0x3, 0x4, 0x3, 0x3, 0x0, 0xa8, 0x2}) writev(r2, &(0x7f00000000c0), 0x0) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0x80047308, &(0x7f0000000100)) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)='T31', 0x1}], 0x1) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) setsockopt(r0, 0x0, 0x20, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x20, 0x0, 0x0) 2.440830435s ago: executing program 3 (id=202): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="63c39468818f1b3866ef3f34cf04cc547c39021ba025c44966ca0fd3fcb369abaab3aa767e61719362fd584fa709d317df99f00903311d339a0667ffcf80f4217dbea563702e", 0x46}], 0x1, 0x280000004) execve(0x0, 0x0, 0x0) mknod(0x0, 0x2000, 0x287e) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x100, &(0x7f0000000180), 0x6, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000180)={0x20e, 0xfffff800, 0x1, 0xfff7ff8f, "0800020000087db300000105001c670000000010", 0x4000020, 0x800001a3}) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) unveil(0x0, &(0x7f0000000340)='r\x00') ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) pledge(&(0x7f0000000000)='tty V\xef\x86\xce3|#\xcb\x13\x12\xe0\r\x9c\xe6\x98\x0f\x01\xc2\xe7\xb9E\xc3\x1d\x96\xdbY\x91\x0e\x17\x95 \x01\xa6~\xd0|/?\xc9\xd5k\xbe\xa9kG\x00\x00\x00\x00\x00@\x00\x01\x00\x00\xeb\x91vr)\\\x9el\x03(r\xd4\x9a\x0f\f\xdb<\xb4B\x95\x15\xb6\r', 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r3, 0xc0206921, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0)) 2.316728264s ago: executing program 4 (id=203): openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r0 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x400, 0xffffffffffffffff, 0x11000, 0xfffffffffffffffe], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x104b72, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x9, 0x2000000000000000}, {0x6b7}, {0x0, 0x965, 0x0, 0x9}], {0x2000, 0x6, 0x5}, {0xfff, 0x6, 0xb0, 0x2}}}) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040), 0x0) kevent(r0, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') close(r0) setsockopt(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x18}, 0x2, &(0x7f0000000040)="a4d0d63d176f077c56859e57d480a0617b32740fe3d16a89ea29f2d49aa0f301a6b37efa8afb5459e0c7ac9d886ce53906a1", &(0x7f0000000080)=0x32, &(0x7f0000000340)="99476ff499ed77ae46cd7154006e7173ed232a9a4f9862ba997df27718f1dfb9f5c98194ba3c820f2486041d157e846924248c3f5fd954c8aef47ad93f44646b05a800fe31d56093350ef6e079d7aba409", 0x51) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0) r3 = shmget$private(0x0, 0x1000, 0x41, &(0x7f00003f9000/0x1000)=nil) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x8000, 0x3) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') chdir(&(0x7f0000000180)='./file0\x00') shmctl$SHM_UNLOCK(r3, 0x4) shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x1000) 2.314762463s ago: executing program 5 (id=204): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) (async) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() (async) r2 = socket(0x18, 0x3, 0x0) getsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000100), &(0x7f0000000280)=0x4) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005136000009f050000002010000000000934ed0a0500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4d0800000000000000f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b671f4d335d223e7db3009b95665b00e32118", 0x62, 0x0, 0x0, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x0, &(0x7f0000000200)}) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000000", 0xa, 0x0, 0x0, 0x0) (async) r3 = socket(0x11, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xd, 0x8000003, 0x5, "001a3cfcff000b00000000000000f5ff00", 0x10003, 0xc04}) (async) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000300)="79be63810e000000e42653dcb5e2ed599e7ed9a199990d3405bbc7a35bfeff16cb505e3c359be6d63b1b17328d7b562735fe7e7b2bc760f5d5bab9d900000000008000004f36c45cb7f069e6066c31bcd291dec4bc2a010306a91678", 0x5c}, {&(0x7f0000000380)="6b9f3a33215050ad67a000cf5479c9f5a1c50f10beca9860019108012efa6290dcb999dc2c137202723a64aebb77c4cabef068ff366a8c9b11b797f4e7273ec515ec6eb47309b2c93b39f01ca2a92600b8d77de7522e5843e8954095eab45701c8665ab25ca291a8062e8d506a79d56c0f53fb63cd2763e85ef3a57803a9b7e132006c91f3a4119c97e28ef7abf6b443c8e7984eb687a116e4aa1c1565690e48fe262badabfe02bf0ba5e3796d", 0xad}, {&(0x7f0000000480)="204758a9d4ad", 0x6}], 0x3) read(r1, &(0x7f0000000200)=""/255, 0xff) unveil(0x0, &(0x7f0000000080)='r\x00') 2.310884042s ago: executing program 7 (id=205): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) bind(r0, &(0x7f0000000000)=@in={0x2, 0x2}, 0xc) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) flock(r1, 0x4) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x1}) 1.423784105s ago: executing program 6 (id=206): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r0, 0xc020691b, &(0x7f00000001c0)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) (async) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='c\x00') sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0xe4}, 0x0) 1.239035947s ago: executing program 2 (id=207): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff6, 0x100010001000b, 0xffffffffffffffff}) setuid(0xee01) mknod(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800c, 0xfffffc00) sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x3, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec370824a8876eaed1a9d70b5bc5bbb2f68d6c9", &(0x7f0000000080)=0xffa2, 0x0, 0x37) r1 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r1, 0x29, 0x35, 0x0, 0x0) rename(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) fcntl$lock(r0, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff6, 0x100010001000b, 0xffffffffffffffff}) (async) setuid(0xee01) (async) mknod(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800c, 0xfffffc00) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x3, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec370824a8876eaed1a9d70b5bc5bbb2f68d6c9", &(0x7f0000000080)=0xffa2, 0x0, 0x37) (async) socket$inet6(0x18, 0x3, 0x0) (async) getsockopt(r1, 0x29, 0x35, 0x0, 0x0) (async) rename(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) 1.238040395s ago: executing program 7 (id=208): mknod(0x0, 0x2000, 0xd02) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80000000000206, 0x0) (async) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r1) (async) open(&(0x7f0000000140)='./file0\x00', 0x20000, 0x0) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r2, 0x0) (async) clock_gettime(0x3, &(0x7f0000000080)) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000000c0)) 1.234780052s ago: executing program 1 (id=209): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x64c8) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000002c0)=[{{r0}, 0xfffffffffffffffe, 0x29, 0x80, 0x2, 0xc}, {{r0}, 0xfffffffffffffffe, 0x10a, 0x10, 0x4, 0x8000000000000000}], 0x8008, 0x0, 0x15, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x3, 0x0) recvmsg(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=""/228, 0xe4}, 0x1c02) setsockopt$sock_int(r3, 0xffff, 0x800, &(0x7f0000000080)=0x4, 0x4) setsockopt(r2, 0x1000000029, 0x27, &(0x7f0000000500)="4ab70400d121e75589448fee735a79ca3add88cf2a7f09af8f81d6836bb92b411badd5c247e1e8c909000000e4920185f03b3188162c4903ccfdfd6cfd74cac2645ec0e474fa00f632883df158c3f3bb87766ac45797fbf7e4607b7c3abf8696b2c4c419c209700c8fd7cebe62fd7d00000000b7225a9f31413b047fc03e0067b3201cb056630b1be3e5e799e9cdabd9a48f9643fcf8ddad392313efa3aebaf8f0757c31a137f60f5e8182b504691250aa8ce87a4dc36b6e60d7ee1f8f8b08881c8d48b9cdb79fac073837687a13f184f9fe00091100", 0xd6) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad9003037008fd8b0e5602493ff1f88b029e0ad0c35ff02000000000000000000000000000102009078000000006006c32e00060600fe8000000000000000000000000000aa00000000000000000000000000000001849b410172fa254fc2a3090aed1ec77e13d398c586619499635b096b892dd6a63d3dbac80a66a7acfa00963d2f4c93c7646b94f6ff389c152db3dddd95958138d581a9219560d693af303474b978ed0ea681"]) r4 = socket(0x2, 0x1, 0x0) setsockopt(r4, 0x0, 0x4, &(0x7f0000000000)="0b000019", 0x4) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(r5, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80080001, 0x80000001, 0x10001, 0x10, [{0xfffffff6, 0x7, 0x6, 0x71008}, {0x7, 0x4, 0x7fff, 0xfffffff9}, {0x8, 0x8000b86, 0xffffbf7d, 0x9}, {0x1002, 0x8800, 0x7}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0xd8, 0x99}, {0xcdf, 0x1, 0x200004f8, 0xb}, {0x8000, 0x180a, 0x13, 0xb}, {0x8, 0x82, 0x50, 0x9}, {0x4, 0x3, 0xd1b, 0x88}, {0x1e0, 0x10001, 0xc, 0x83}, {0x7fe, 0x4, 0x9, 0x5}, {0xfffffffe, 0xc3a, 0x16, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x1000006, 0x5}, {0xfffffffd, 0x2000009, 0x40004, 0x30005}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000000c0)={0x0, 0x400000000000000, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) open(&(0x7f0000000180)='./file0\x00', 0x615, 0x20) socket(0x18, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r6 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r6, 0x802069b2, &(0x7f00000001c0)) setrlimit(0x5, &(0x7f0000000000)={0x10000, 0x1}) 1.23431482s ago: executing program 5 (id=210): r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x20000000) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) setuid(0xee01) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) ioctl$FIONREAD(r1, 0x8028698c, &(0x7f0000000100)) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 1.233548236s ago: executing program 5 (id=211): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r0 = kqueue() mknod(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x0) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file2\x00') symlink(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0xffff, 0xc0, 0x4, 0x1, 0x84, 0x4, 0x1, 0x1, 0x1, 0x4000000000000106, 0x101}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xff, 0x14be, 0xffff, 0x1, 0x39, 0xe4e, 0x4000001, 0x0, 0x2, 0x5, 0x6}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) nanosleep(&(0x7f00000025c0), &(0x7f0000001180)) 1.230134904s ago: executing program 1 (id=212): socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x2, 0xfffffffffffffffd, 0x0, 0x20000000, 0x800000000000, 0x400000000, 0xffdffffffffffffe}, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async) r0 = socket(0x5d30ed46fa391ca1, 0x1, 0x8) close(r0) setsockopt(r0, 0x2a, 0xa, &(0x7f0000000380)="8064a90b3582800000a04760e3f6446ad3000000000000000000ac9482a0f21c8d5bba1be8de8480b47f30f734744d7f", 0x30) (async) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0/file0\x00'}, 0x10) (async) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000b80)="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"/285, 0x11d}, {&(0x7f0000000200)="b389e5aeb7b42eab8dd001567bf060f918", 0x11}], 0x2) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2011, r1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0x8) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r2 = socket(0x18, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xffff, 0xc0, 0xfff4, 0x1, 0x7ff, 0xffffffff, 0x1, 0x1, 0x1, 0x4000000000000006, 0x101}) (async) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x2, 0x4, 0x0) (async) kevent(0xffffffffffffffff, 0x0, 0x400, 0x0, 0x11000000, 0x0) (async) socket(0x18, 0x1, 0x0) semget$private(0x0, 0x3, 0x22) (async) getgid() (async) r4 = shmget$private(0x0, 0x4000, 0xa0, &(0x7f0000321000/0x4000)=nil) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) (async) getgroups(0x7, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000300)={{0x8, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7, 0xe0, 0x9dcd}, 0xf, 0x6a07, 0x0, 0xffffffffffffffff, 0x1, 0xad6, 0x10001}) 1.011125399s ago: executing program 6 (id=213): r0 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r0, &(0x7f0000000000)=""/133, 0x85, 0x40, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x3}, 0x8) getsockopt$sock_int(r0, 0xffff, 0x8, 0x0, 0x0) 986.786201ms ago: executing program 1 (id=214): r0 = socket(0x2, 0x1, 0xff) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x8, 0x1}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) flock(r0, 0x18) (async) flock(r0, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000), 0x10) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x83, 0xc1}, {0x43, 0x3000}, {0x23, 0x4}, {0x0, 0x7fffffff}, {0x44, 0xfffffffd}], 0x5}) syz_emit_ethernet(0x62, &(0x7f0000000140)={@remote, @remote, [], {@ipv4={0x800, {{0x13, 0x4, 0x0, 0x7, 0x54, 0x64, 0x7, 0x14, 0x11, 0x0, @broadcast, @multicast1, {[@generic={0x88, 0xb, "6c8d7858500c88bb17"}, @rr={0x7, 0x7, 0x2, [@rand_addr=0x4]}, @lsrr={0x83, 0x23, 0x3, [@loopback, @loopback, @local={0xac, 0x14, 0x0}, @broadcast, @rand_addr=0x8, @multicast1, @loopback, @remote={0xac, 0x14, 0x0}]}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x80000000}}}}}) (async) syz_emit_ethernet(0x62, &(0x7f0000000140)={@remote, @remote, [], {@ipv4={0x800, {{0x13, 0x4, 0x0, 0x7, 0x54, 0x64, 0x7, 0x14, 0x11, 0x0, @broadcast, @multicast1, {[@generic={0x88, 0xb, "6c8d7858500c88bb17"}, @rr={0x7, 0x7, 0x2, [@rand_addr=0x4]}, @lsrr={0x83, 0x23, 0x3, [@loopback, @loopback, @local={0xac, 0x14, 0x0}, @broadcast, @rand_addr=0x8, @multicast1, @loopback, @remote={0xac, 0x14, 0x0}]}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x80000000}}}}}) 984.205045ms ago: executing program 2 (id=215): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() r1 = semget(0x0, 0x1, 0x281) semop(r1, &(0x7f0000000000), 0x23) close(r0) r2 = syz_open_pts() r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$TIOCSETA(r3, 0xc0284414, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x80, "541a8ebd000000004000", 0x10005, 0xe62}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x28, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x0, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x8001}, {0x4, 0xe2, 0x7, 0x100}, {0x3, 0x40b, 0xf15, 0x2}, {0x9cb, 0xfffc, 0xc, 0x9}, {0x4, 0x800, 0x3, 0x9}, {0x9, 0x9, 0x28000, 0xb7}, {0x9, 0x1, 0x6, 0x7fff}, {0x3, 0xfffffffc, 0x8, 0x28bfd}, {0x0, 0x2, 0x8, 0x7}, {0x3, 0xc7cb, 0x7ffffe, 0xa67}, {0x401, 0x10, 0x9, 0xa2}, {0x3, 0x1006e2, 0x2, 0x6f5fc48b}, {0x3, 0x101, 0x5, 0x9}, {0x9be2, 0x2, 0x2, 0x69}]}) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000180)={0x42978c, 0x3, 0xfffbfc03, 0x80a19a, "bb080006020900d91050080000000f00", 0x0, 0x6}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) 974.042046ms ago: executing program 4 (id=216): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x0) close(r1) socket(0x2, 0x3, 0x0) socket(0x18, 0xc003, 0x3a) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) connect$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0xa) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(r1, &(0x7f00000005c0)="04bdfa5d1d2873c63e3534d33498b64fadcb823ea1aa44c43050006123339a59d631b9b6835bf4bbbb00346f731573d8d508753f95b768543dbe030000000000000000000000000000fcc025b9023cd431bc30c7f2206d615db9df5944d54b95a7f7f8670c1866adf56c7a631568f1bff98256cc1692fad7941ecc28a90fcdb86d7b88e347eb67b5cfd2aed521059a36d3a1afceac69ae7ce17469d3980f189052062a4c799644fb5487000000000000000000", 0x1004d) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0) listen(r0, 0x0) accept$unix(r0, 0x0, 0x0) semget(0x0, 0x1, 0x281) getpid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180), &(0x7f0000000140)=0xc) getpgid(0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0x7, 0xfa, 0x9, 0x798}, {0x2, 0xff, 0xd5, 0x2}, {0x3e, 0x6, 0x8, 0xa}]}) syz_emit_ethernet(0x100e, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES16=r3]) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x3}, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffec9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5000000", 0x4) 182.241163ms ago: executing program 6 (id=217): select(0x40, &(0x7f0000001400)={0x3, 0x100, 0xa, 0x0, 0x2, 0x0, 0x9, 0x1}, &(0x7f0000001440)={0x7, 0x1ff, 0x7, 0x9, 0x1, 0xffff, 0x5, 0x8}, 0x0, 0x0) (async) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7822) (async) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 181.790847ms ago: executing program 1 (id=218): renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0x820351a, "090e4de6d30aa692318c7e0002f9ffffff00"}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, &(0x7f0000000100)='q', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000080)='./file0\x00', 0x8}) r1 = socket(0x24, 0x2, 0x0) getsockopt(r1, 0x6, 0x9, 0x0, 0x0) r2 = syz_open_pts() sysctl$kern(0x0, 0x0, &(0x7f0000000380)="d635d193c2", &(0x7f0000000080)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f95f", &(0x7f0000000080)=0x3, 0x0, 0x0) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00') ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000180)={0x9, 0x6, 0x5, 0x200, "67d26ff01e14c176e79eef6e50317aa177c472b6", 0xffffffff, 0x2}) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) ioctl$TIOCEXCL(r3, 0x2000740d) 112.035257ms ago: executing program 7 (id=219): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000640)='x\x00') r0 = socket(0x18, 0x3, 0x1) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0x200000000000001}], 0x203, 0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x25, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) getsockopt(r0, 0x29, 0x2c, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) socketpair(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001dc0)={0x0}, 0x10, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) 2.971978ms ago: executing program 3 (id=220): sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0xa, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x2, 0x0) setuid(0xee01) ioctl$FIONREAD(r0, 0x8020699d, &(0x7f00000001c0)) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) r1 = open(&(0x7f0000000240)='./file0\x00', 0x80, 0x8) fcntl$setstatus(r1, 0x4, 0x80) sendmsg$unix(0xffffffffffffffff, 0x0, 0x408) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8f82c1d09936270286ea75b958983a9f15438392f4d2feb0900000000000ef962", 0xa8269}], 0x1, 0x0) r3 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x2e) ftruncate(r3, 0x80002) r4 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f0000000000)={0x4, 0x17}, 0x2, 0x0, 0x0, 0x0, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) ioctl$TIOCSETA(r5, 0xc0504417, &(0x7f0000000740)={0x0, 0x9, 0x0, 0xfffffffd, "000000001000ef0f00", 0x4f, 0x1180a}) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x3c, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x2, 0x0, 0xfffd, {[@sack={0x5, 0x12, [0x2280, 0x6, 0xef2, 0x2]}]}}}}}}}) syz_emit_ethernet(0xe6, &(0x7f0000000100)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900b03a003bcc3f0600000058132fa13a8be186e3fe8000000000000000000000000000aa89"]) acct(&(0x7f0000000140)='./bus\x00') 1.935299ms ago: executing program 2 (id=221): ioctl$FIONBIO(0xffffffffffffffff, 0x8004667e, 0x0) getsockopt(0xffffffffffffffff, 0x8, 0x74, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001880), 0x10081, 0x0) ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f0000001dc0)) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r1 = open(&(0x7f0000000080)='./file0\x00', 0x20, 0x56) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r1}, 0xffffffffffffffff, 0x13}, {{r1}, 0xffffffffffffffff, 0x62}], 0xa, 0x0) 1.417628ms ago: executing program 6 (id=222): open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x200, 0x8a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r1, 0x4) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809edd, 0x7e, 0xfffffffeffffffff, 0x8000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) accept$unix(r1, 0x0, 0x0) r3 = kqueue() setitimer(0x0, &(0x7f0000000000), 0x0) kevent(r3, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0) 0s ago: executing program 4 (id=223): madvise(&(0x7f0000223000/0x2000)=nil, 0x2000, 0x4) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error panic: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 132 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 291503 545 0 0 0 0 syz-executor *253210 545 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff8336fccb) at panic+0x1e5 __assert(ffffffff833b27d2,ffffffff833b0192,84,ffffffff8340aa0f) at __assert+0x29 rtmap_grow(17,21) at rtmap_grow+0x24f rtable_add(16) at rtable_add+0x2d9 if_createrdomain(16,ffff800000b2d000) at if_createrdomain+0x40 ifioctl(ffff800010fda020,8020699f,ffff80003c439ac0,ffff80003c43a028) at ifioctl+0x1c66 sys_ioctl(ffff80003c43a028,ffff80003c439ca0,ffff80003c439bf0) at sys_ioctl+0x674 syscall(ffff80003c439ca0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x49db28201e0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 132 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8336fccb) at panic+0x1e5 __assert(ffffffff833b27d2,ffffffff833b0192,84,ffffffff8340aa0f) at __assert+0x29 rtmap_grow(17,21) at rtmap_grow+0x24f rtable_add(16) at rtable_add+0x2d9 if_createrdomain(16,ffff800000b2d000) at if_createrdomain+0x40 ifioctl(ffff800010fda020,8020699f,ffff80003c439ac0,ffff80003c43a028) at ifioctl+0x1c66 sys_ioctl(ffff80003c43a028,ffff80003c439ca0,ffff80003c439bf0) at sys_ioctl+0x674 syscall(ffff80003c439ca0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x49db28201e0, count: -10 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c4397d0 rbx 0xffff8000299eeddf rdx 0 rcx 0xffff80003c43a028 rax 0xffff8000299edff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x22268815bd0ced59 r11 0x8d3560dab18350e r12 0xffff8000299eebe0 r13 0 r14 0 r15 0x1 rip 0xffffffff82c66485 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c4397c0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=253210 pid=545 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c43a558,0xffff80003c43ba28 process=0xffff80003c425360 user=0xffff80003c434000, vmspace=0xfffffd806ab59208 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 8060 208223 22724 0 2 0 syz-executor 545 291503 673 0 7 0 syz-executor * 545 253210 673 0 7 0x4000000 syz-executor 545 340965 673 0 2 0x4000000 syz-executor 46040 406644 19190 0 2 0 syz-executor 46040 173682 19190 0 3 0x4000080 fsleep syz-executor 63695 24132 69304 0 2 0 syz-executor 63695 296292 69304 0 3 0x4000080 fsleep syz-executor 63695 154930 69304 0 2 0x4000001 syz-executor 97609 445787 6831 0 2 0 syz-executor 97609 44684 6831 0 3 0x4000080 fsleep syz-executor 32702 32434 53526 0 2 0 syz-executor 32702 408157 53526 0 3 0x4000000 biowait syz-executor 42244 347413 0 0 3 0x14200 bored sosplice 19190 168434 72582 0 3 0x82 nanoslp syz-executor 69304 372435 72582 0 3 0x82 nanoslp syz-executor 81594 521128 72582 0 3 0x2 biowait syz-executor 673 328392 72582 0 3 0x82 nanoslp syz-executor 6831 483161 72582 0 3 0x82 nanoslp syz-executor 22724 332666 72582 0 3 0x82 nanoslp syz-executor 53526 450258 72582 0 3 0x82 nanoslp syz-executor 63839 102321 72582 0 3 0x82 wait syz-executor 72582 513329 8188 0 3 0x82 kqread syz-executor 8188 221878 61084 0 3 0x10008a sigsusp ksh 61084 131971 34936 0 3 0x98 kqread sshd-session 34936 492027 76073 0 3 0x92 kqread sshd-session 48004 478919 1 0 3 0x100083 ttyin getty 76073 151950 1 0 3 0x88 kqread sshd 14966 377661 55715 74 3 0x1100092 bpf pflogd 55715 103762 1 0 3 0x80 sbwait pflogd 20036 278503 56414 73 3 0x1100090 kqread syslogd 56414 469161 1 0 3 0x100082 sbwait syslogd 64397 164399 1 0 3 0x100080 kqread resolvd 52117 247002 56822 77 3 0x100092 kqread dhcpleased 90337 56307 56822 77 3 0x100092 kqread dhcpleased 56822 426539 1 0 3 0x80 kqread dhcpleased 64985 312259 0 0 3 0x14200 bored smr 29359 439657 0 0 2 0x14200 zerothread 93428 132341 0 0 3 0x14200 aiodoned aiodoned 81465 480446 0 0 3 0x14200 syncer update 86701 487575 0 0 3 0x14200 cleaner cleaner 68092 96466 0 0 3 0x14200 reaper reaper 77832 331655 0 0 3 0x14200 pgdaemon pagedaemon 45653 225962 0 0 3 0x14200 bored viomb 43738 106729 0 0 3 0x40014200 acpi0 acpi0 65728 401183 0 0 3 0x40014200 idle1 36179 75976 0 0 3 0x14200 bored softnet7 86188 268869 0 0 3 0x14200 bored softnet6 81927 56171 0 0 3 0x14200 bored softnet5 24437 217385 0 0 3 0x14200 bored softnet4 68675 213041 0 0 3 0x14200 bored softnet3 7980 269447 0 0 3 0x14200 bored softnet2 2157 235094 0 0 3 0x14200 bored softnet1 55225 383420 0 0 3 0x14200 bored softnet0 52131 340467 0 0 3 0x14200 bored systqmp 76680 162105 0 0 3 0x14200 bored systq 32489 481719 0 0 3 0x14200 tmoslp softclockmp 21523 197914 0 0 3 0x40014200 tmoslp softclock 57825 350803 0 0 3 0x40014200 idle0 1 98401 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 545 (syz-executor) thread 0xffff80003c43a028 (253210) exclusive kernel_lock &kernel_lock r = 1 (0xffffffff839bfc60) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 malloc+0xe3 #3 rtmap_grow+0xb2 #4 rtable_add+0x2d9 #5 if_createrdomain+0x40 #6 ifioctl+0x1c66 #7 sys_ioctl+0x674 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 32702 (syz-executor) thread 0xffff80003c43b780 (408157) exclusive rrwlock inode r = 0 (0xfffffd806b820b48) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806b820208) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 Process 81594 (syz-executor) thread 0xffff8000ffff2a70 (521128) exclusive rrwlock inode r = 0 (0xfffffd806b8208f8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806bd91d90) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10202 11029K 11193K 166960K 11508 0 pcb 20 12K 12K 166960K 60 0 rtable 210 8K 8K 166960K 310 0 pf 36 18K 81K 166960K 79 0 ifaddr 44 7K 8K 166960K 65 0 ifgroup 55 2K 2K 166960K 94 0 sysctl 3 1K 9K 166960K 9 0 counters 68 36K 38K 166960K 120 0 ioctlops 0 0K 4K 166960K 1528 0 iov 0 0K 14K 166960K 11 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1374 86K 87K 166960K 1542 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 9 0K 0K 166960K 12 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 110K 166960K 363 0 sigio 0 0K 0K 166960K 4 0 proc 72 115K 196K 166960K 543 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 38 0 in_multi 102 7K 7K 166960K 111 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 384 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 232 168K 176K 166960K 4912 0 UVM aobj 77 3K 4K 166960K 78 0 pinsyscall 42 84K 103K 166960K 1434 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 7 0 NDP 12 0K 2K 166960K 43 0 temp 41 8643K 8718K 166960K 20678 0 kqueue 14 22K 28K 166960K 67 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 46 0 43 1 0 1 1 0 8 0 rtentry 176 103 0 16 5 0 5 5 0 8 0 unpcb 144 166 0 147 1 0 1 1 0 8 0 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 736 130 0 126 7 6 1 7 0 8 0 arp 128 12 0 1 1 0 1 1 0 8 0 inpcb 328 291 0 281 8 6 2 7 0 8 1 nd6 144 17 0 0 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 1 0 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 22 0 22 2 1 1 1 0 8 1 pppxif 1504 1 0 1 1 1 0 1 0 8 0 pffrag 232 2 0 0 1 0 1 1 0 482 0 pffrnode 88 2 0 0 1 0 1 1 0 8 0 pffrent 40 3 0 1 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 1 1 1 0 1 0 8 0 pfstitem 24 33 0 1 1 0 1 1 0 8 0 pfstkey 128 37 0 5 2 0 2 2 0 8 0 pfstate 384 34 0 3 4 0 4 4 0 8 0 pfrule 1344 23 0 18 2 1 1 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 486 0 50 30 1 29 30 0 8 0 art_table 40 488 0 50 5 0 5 5 0 8 0 art_node 32 103 0 26 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 semapl 112 9 0 2 1 0 1 1 0 8 0 shmpl 112 75 0 1 3 0 3 3 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2008 0 498 96 0 96 96 0 8 0 ffsino 296 2008 0 498 118 1 117 118 0 8 0 nchpl 144 2498 0 812 63 0 63 63 0 8 0 rtmask 32 5 0 5 2 1 1 1 0 8 1 uvmvnodes 80 2187 0 0 45 0 45 45 0 8 0 vnodes 216 2187 0 0 122 0 122 122 0 8 0 namei 1024 7736 0 7734 3 2 1 2 0 8 0 percpumem 16 75 0 26 1 0 1 1 0 8 0 kstatmem 264 56 0 30 3 1 2 3 0 8 0 scsiplug 72 3 0 3 1 1 0 1 0 8 0 scxspl 216 8553 0 8551 3 2 1 2 1 8 0 plimitpl 152 52 0 35 1 0 1 1 0 8 0 sigapl 424 659 0 605 7 0 7 7 0 8 0 knotepl 120 307 0 0 10 0 10 10 0 8 0 kqueuepl 224 103 0 92 2 1 1 2 0 8 0 pipepl 344 148 0 121 6 0 6 6 0 8 3 fdescpl 528 636 0 605 3 0 3 3 0 8 0 filepl 160 2892 0 2669 13 0 13 13 0 8 3 lockfpl 104 104 0 100 1 0 1 1 0 8 0 lockfspl 48 42 0 38 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 37 0 20 1 0 1 1 0 8 0 ucredpl 104 300 0 287 1 0 1 1 0 8 0 zombiepl 144 626 0 625 1 0 1 1 0 8 0 processpl 1232 659 0 605 5 0 5 5 0 8 0 procpl 664 1067 0 1006 7 1 6 7 0 8 0 sockpl 752 513 0 480 11 7 4 11 0 8 0 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 112 0 0 14 0 14 14 0 8 0 mcl2k 2048 34 0 0 5 0 5 5 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 203 0 0 13 0 13 13 0 8 0 bufpl 280 3476 0 123 240 0 240 240 0 8 0 anonpl 32 5496 0 0 45 0 45 45 0 246 0 amapchunkpl 152 15366 0 14903 32 7 25 26 0 158 2 amappl16 200 2365 0 2338 5 2 3 5 0 8 0 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 113 0 101 1 0 1 1 0 8 0 amappl13 176 3 0 3 1 1 0 1 0 8 0 amappl12 168 1275 0 1245 3 1 2 2 0 8 0 amappl11 160 55 0 41 1 0 1 1 0 8 0 amappl10 152 6 0 6 1 1 0 1 0 8 0 amappl9 144 256 0 255 1 0 1 1 0 8 0 amappl8 136 21 0 18 1 0 1 1 0 8 0 amappl7 128 111 0 99 1 0 1 1 0 8 0 amappl6 120 177 0 174 1 0 1 1 0 8 0 amappl5 112 198 0 189 1 0 1 1 0 8 0 amappl4 104 289 0 272 1 0 1 1 0 8 0 amappl3 96 2525 0 2433 3 0 3 3 0 8 0 amappl2 88 860 0 783 2 0 2 2 0 8 0 amappl1 80 9187 0 8579 14 1 13 14 0 8 0 amappl 88 4213 0 4055 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 77 0 1 2 0 2 2 0 8 0 uaddrrnd 24 636 0 605 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 636 0 605 1 0 1 1 0 8 0 vmmpekpl 168 6843 0 6809 2 0 2 2 0 8 0 vmmpepl 168 46230 0 44263 90 0 90 90 0 357 1 vmsppl 488 635 0 605 5 1 4 5 0 8 0 rwobjpl 80 17420 0 14235 66 0 66 66 0 8 0 pdppl 4096 1280 0 1210 98 26 72 86 0 8 2 pvpl 32 13055 0 0 107 1 106 106 0 265 0 pmappl 256 635 0 605 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 280 0 38 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8378eff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839bfa58) at __mp_lock+0x199 intr_handler(ffff80003c421460,ffff800000079a80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x7a79906b2080, count: 9 ddb{0}> trace x86_ipi_db(ffffffff8378eff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839bfa58) at __mp_lock+0x199 intr_handler(ffff80003c421460,ffff800000079a80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x7a79906b2080, count: -6 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff8336fccb) at panic+0x1e5 __assert(ffffffff833b27d2,ffffffff833b0192,84,ffffffff8340aa0f) at __assert+0x29 rtmap_grow(17,21) at rtmap_grow+0x24f rtable_add(16) at rtable_add+0x2d9 if_createrdomain(16,ffff800000b2d000) at if_createrdomain+0x40 ifioctl(ffff800010fda020,8020699f,ffff80003c439ac0,ffff80003c43a028) at ifioctl+0x1c66 sys_ioctl(ffff80003c43a028,ffff80003c439ca0,ffff80003c439bf0) at sys_ioctl+0x674 syscall(ffff80003c439ca0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x49db28201e0, count: 5 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8336fccb) at panic+0x1e5 __assert(ffffffff833b27d2,ffffffff833b0192,84,ffffffff8340aa0f) at __assert+0x29 rtmap_grow(17,21) at rtmap_grow+0x24f rtable_add(16) at rtable_add+0x2d9 if_createrdomain(16,ffff800000b2d000) at if_createrdomain+0x40 ifioctl(ffff800010fda020,8020699f,ffff80003c439ac0,ffff80003c43a028) at ifioctl+0x1c66 sys_ioctl(ffff80003c43a028,ffff80003c439ca0,ffff80003c439bf0) at sys_ioctl+0x674 syscall(ffff80003c439ca0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x49db28201e0, count: -10